Your security trust center.
Stop answering the same security questionnaires. Give your customers one place to verify compliance, access documentation, review vulnerabilities, and check your SBOMs.
Everything in one portal
Branded trust center
Your own subdomain where customers see compliance certifications, security practices, and company security posture — no more back-and-forth over email.
Document access management
Share security documentation with access controls. Customers request access, you approve or deny. Bulk access, magic links, full audit trail.
Product security
Publish SBOMs in CycloneDX and SPDX, generate CSAF advisories and VEX documents, and maintain a public vulnerability disclosure page — all machine-readable.
Vulnerability and incident tracking
Track vulnerabilities through their full lifecycle. Manage incidents with coordinated disclosure. Keep a public transparency feed your customers can follow.
CRA and ENISA reporting
ENISA incident workflow with 24h / 72h / 14-day timelines. CRA readiness scoring tells you what's missing. Read the CRA guide →
AI-powered setup
Point it at your company website and the onboarding AI auto-detects your products, relevant frameworks, and prefills your trust center. Live in minutes.
CRA-ready out of the box
If the Cyber Resilience Act applies to you, every feature maps directly to a specific obligation. Read the full CRA guide
CRA reporting obligations begin September 11, 2026 — from now. Non-compliance penalties reach €15 million or 2.5% of global revenue.
One plan. Everything included.
Try the full platform for 3 months, free. No credit card, no feature gates, no surprises. If it works for you, stay.
- Branded trust center on your subdomain
- Compliance and security practice pages
- Document access management
- Unlimited products, SBOMs, and advisories
- Vulnerability and incident tracking
- CRA readiness and ENISA reporting
- AI-powered onboarding
- Full audit trail